Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143018.roa
File: AS143018.roa (raw, json)
Hash identifier: gxsIsjCpH+U5vxkeD5D7aRWLBS3ckxsVIE5DeN9K2+o=
Subject key identifier: D1:56:1B:3E:26:E2:23:D1:FA:BB:30:4C:ED:96:5A:71:0B:AC:5B:7D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31F7B236429EEB4D0D760C688B03F5543AAA52D2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143018.roa
Signing time: Fri 22 May 2026 02:47:57 +0000
ROA not before: Fri 22 May 2026 02:42:57 +0000
ROA not after: Fri 21 May 2027 02:47:57 +0000
asID: 143018
IP address blocks: 240a:a170::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f7:b2:36:42:9e:eb:4d:0d:76:0c:68:8b:03:f5:54:3a:aa:52:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:57 2026 GMT
Not After : May 21 02:47:57 2027 GMT
Subject: CN=D1561B3E26E223D1FABB304CED965A710BAC5B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:18:32:53:c0:f7:42:47:01:1f:36:51:b3:
0c:97:83:cd:32:2f:cd:d3:9c:22:77:15:74:87:c4:
d4:9c:fe:1c:6d:1b:4c:02:ce:49:a1:b3:8e:ba:51:
5b:9a:3f:f3:6a:25:4f:e7:50:cd:54:20:f2:03:e0:
65:1e:ad:e9:14:b7:3c:be:33:df:65:3b:1a:5e:89:
ef:09:fc:ef:4a:ad:df:e1:df:77:82:ea:9e:9d:ac:
74:42:52:98:f5:e3:22:e7:b9:d4:f7:10:c4:f4:af:
2a:3c:1d:e9:cb:ff:e3:db:74:0c:81:76:e5:93:c8:
1a:e5:aa:c6:38:97:cd:d3:95:e4:1d:b7:2f:bc:bd:
88:91:35:96:b7:7d:4d:e8:56:45:22:ce:2b:f0:e9:
17:ef:dc:30:64:86:f6:d6:c3:f5:64:ec:ee:a7:e8:
1c:cf:07:30:df:a8:32:12:44:39:21:32:35:4b:6b:
e3:43:71:a7:80:a4:35:ab:07:b0:b3:4f:8e:d2:31:
db:b1:0f:31:47:65:9a:61:23:b1:58:5d:de:a9:29:
4b:ca:1e:76:ba:58:e2:b1:e5:f9:22:09:dc:1d:6a:
75:25:61:93:01:18:bb:a2:62:6d:9e:2e:37:db:ce:
03:d1:0e:7f:c2:c0:58:3a:37:51:ac:72:f8:d0:65:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:56:1B:3E:26:E2:23:D1:FA:BB:30:4C:ED:96:5A:71:0B:AC:5B:7D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143018.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a170::/32
Signature Algorithm: sha256WithRSAEncryption
0e:c0:6f:62:e7:e1:a9:e1:cf:a8:fa:bb:a3:c3:ee:7e:6d:1e:
0b:2d:06:af:e1:88:aa:9b:fd:29:6e:62:e8:43:81:07:7c:53:
85:1b:f2:38:f1:31:00:a3:63:b3:d3:90:54:7b:de:e0:e4:6d:
b3:bb:0b:a9:6a:29:56:8d:74:18:30:cb:7c:32:ed:fd:7f:c1:
d0:1f:40:0c:41:df:c8:e3:1a:b1:2b:ba:f9:75:e4:d7:38:d9:
90:34:ed:b2:81:da:df:7e:84:e2:4b:de:7f:b7:d9:46:31:73:
5a:85:9b:f8:1b:6b:6e:01:92:38:d1:10:44:8e:3f:28:42:ed:
c2:f3:d7:ec:61:4b:d7:37:71:b4:07:77:0d:7b:8c:ed:8f:55:
56:ab:2f:e2:05:1a:00:c6:8c:81:87:2e:3f:b9:ca:e9:e7:d8:
1e:95:ee:b3:29:23:ba:05:d9:7d:d3:36:40:f6:f1:35:bc:a6:
36:17:8f:19:56:3a:71:dd:f1:03:32:67:36:f1:31:d8:93:6b:
8d:a0:9c:00:a3:83:4e:ed:3a:13:59:e7:1a:77:89:ed:44:e6:
08:3d:d1:b0:8a:9e:22:ca:64:b3:e0:d7:31:d8:b3:9c:59:4f:
b7:0d:40:19:e2:d4:75:33:66:fa:ff:86:a6:6e:20:d7:70:91:
94:a9:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:56 2026 by rpki-client